Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ucaBFstmQbaT_aVEskdsuj7TJXs.roa
File: ucaBFstmQbaT_aVEskdsuj7TJXs.roa (raw, json)
Hash identifier: MZa06zgqEJ1kdQmKaAz34MakJvcxT8NN1ddtKX/8U1c=
Subject key identifier: B9:C6:81:16:CB:66:41:B6:93:FD:A5:44:B2:47:6C:BA:3E:D3:25:7B
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 0196FCEBD14411388076D72DCCEE3856A84B
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ucaBFstmQbaT_aVEskdsuj7TJXs.roa
Signing time: Fri 23 May 2025 11:33:55 +0000
ROA not before: Fri 23 May 2025 11:33:55 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 6830
IP address blocks: 80.81.39.0/24 maxlen: 24
80.81.40.0/24 maxlen: 24
80.81.47.0/24 maxlen: 24
80.81.48.0/24 maxlen: 24
80.81.49.0/24 maxlen: 24
80.81.50.0/24 maxlen: 24
80.81.52.0/24 maxlen: 24
80.81.53.0/24 maxlen: 24
80.81.56.0/24 maxlen: 24
80.81.58.0/24 maxlen: 24
80.255.224.0/20 maxlen: 20
80.255.232.0/21 maxlen: 21
83.223.128.0/24 maxlen: 24
83.223.129.0/24 maxlen: 24
83.223.130.0/24 maxlen: 24
83.223.131.0/24 maxlen: 24
83.223.134.0/24 maxlen: 24
83.223.135.0/24 maxlen: 24
83.223.137.0/24 maxlen: 24
83.223.138.0/24 maxlen: 24
83.223.140.0/24 maxlen: 24
83.223.142.0/24 maxlen: 24
83.223.144.0/24 maxlen: 24
83.223.148.0/24 maxlen: 24
83.223.152.0/24 maxlen: 24
83.223.153.0/24 maxlen: 24
83.223.154.0/24 maxlen: 24
83.223.156.0/24 maxlen: 24
83.223.157.0/24 maxlen: 24
83.223.158.0/24 maxlen: 24
85.254.41.0/24 maxlen: 24
85.254.46.0/24 maxlen: 24
85.254.52.0/24 maxlen: 24
85.254.53.0/24 maxlen: 24
85.254.54.0/24 maxlen: 24
85.254.55.0/24 maxlen: 24
85.254.66.0/24 maxlen: 24
85.254.67.0/24 maxlen: 24
85.254.133.0/24 maxlen: 24
85.254.135.0/24 maxlen: 24
85.254.136.0/24 maxlen: 24
85.254.165.0/24 maxlen: 24
85.254.166.0/24 maxlen: 24
85.254.167.0/24 maxlen: 24
85.254.171.0/24 maxlen: 24
85.254.190.0/24 maxlen: 24
91.190.37.0/24 maxlen: 24
91.190.38.0/24 maxlen: 24
91.190.39.0/24 maxlen: 24
91.190.47.0/24 maxlen: 24
91.190.61.0/24 maxlen: 24
91.190.62.0/24 maxlen: 24
94.101.226.0/24 maxlen: 24
94.101.237.0/24 maxlen: 24
159.148.143.0/24 maxlen: 24
159.148.148.0/24 maxlen: 24
159.148.149.0/24 maxlen: 24
159.148.181.0/24 maxlen: 24
159.148.240.0/24 maxlen: 24
159.148.242.0/24 maxlen: 24
185.7.237.0/24 maxlen: 24
185.7.238.0/24 maxlen: 24
185.7.239.0/24 maxlen: 24
185.176.116.0/24 maxlen: 24
185.176.119.0/24 maxlen: 24
Validation: Failed, certificate revoked on Fri 23 May 2025 14:33:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:fc:eb:d1:44:11:38:80:76:d7:2d:cc:ee:38:56:a8:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: May 23 11:33:55 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=b9c68116cb6641b693fda544b2476cba3ed3257b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:52:dc:0b:0a:ad:e6:9f:1c:c4:68:c7:ac:d4:
ca:d3:40:0f:53:6d:70:7f:8d:20:f4:dc:b9:09:f5:
c2:5c:96:bc:31:96:43:0f:fc:88:79:ac:d6:c5:34:
3f:4c:f3:db:f1:89:0a:0b:8c:08:9a:c1:f9:ff:c6:
75:97:53:55:b2:27:2e:fa:a6:f2:8b:90:34:8b:3f:
64:b7:a0:8d:af:8c:61:93:35:e5:57:a1:d0:32:b3:
e9:a8:3d:ac:42:a6:55:2d:7e:87:97:ae:a4:de:cd:
44:e1:36:c9:c5:48:7f:f6:24:8a:1d:65:3a:89:07:
ac:8d:8d:0e:a9:9b:0a:2a:08:a0:22:f5:ee:a1:48:
7b:e3:7c:6a:be:fc:59:d1:20:15:65:13:88:de:c3:
7c:00:50:7d:ac:40:32:0f:6d:21:c6:42:7b:e1:0f:
5d:df:bb:ac:f9:e5:9c:95:d4:59:a1:f8:ae:9f:d2:
4f:52:a6:df:b7:cf:24:cb:eb:98:23:f5:99:a0:86:
f6:7a:ff:6d:da:d8:6a:15:fc:30:99:02:35:52:9c:
eb:a9:cf:20:13:48:a9:4b:e6:4b:d0:88:2a:4e:4f:
1c:a7:33:b0:be:f0:10:5c:88:63:ad:51:9f:84:b8:
8c:2a:f5:d4:51:2d:04:26:ad:d3:02:a1:2b:46:46:
f8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:C6:81:16:CB:66:41:B6:93:FD:A5:44:B2:47:6C:BA:3E:D3:25:7B
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/ucaBFstmQbaT_aVEskdsuj7TJXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.81.39.0-80.81.40.255
80.81.47.0-80.81.50.255
80.81.52.0/23
80.81.56.0/24
80.81.58.0/24
80.255.224.0/20
83.223.128.0/22
83.223.134.0/23
83.223.137.0-83.223.138.255
83.223.140.0/24
83.223.142.0/24
83.223.144.0/24
83.223.148.0/24
83.223.152.0-83.223.154.255
83.223.156.0-83.223.158.255
85.254.41.0/24
85.254.46.0/24
85.254.52.0/22
85.254.66.0/23
85.254.133.0/24
85.254.135.0-85.254.136.255
85.254.165.0-85.254.167.255
85.254.171.0/24
85.254.190.0/24
91.190.37.0-91.190.39.255
91.190.47.0/24
91.190.61.0-91.190.62.255
94.101.226.0/24
94.101.237.0/24
159.148.143.0/24
159.148.148.0/23
159.148.181.0/24
159.148.240.0/24
159.148.242.0/24
185.7.237.0-185.7.239.255
185.176.116.0/24
185.176.119.0/24
Signature Algorithm: sha256WithRSAEncryption
60:a9:44:68:2c:a6:d2:5b:ca:71:cf:e3:59:55:09:ef:08:96:
b6:86:17:f1:32:25:f8:50:b7:a1:c1:3a:d5:74:11:3c:9c:70:
0f:8e:2a:8d:ce:de:64:19:65:df:b2:5a:c5:a9:47:dc:97:b8:
bf:ea:46:89:a3:58:5c:ac:f8:79:e4:8d:02:fb:5c:5b:88:a7:
87:f9:d0:76:2a:9b:be:b3:6d:20:19:42:16:3e:b0:69:e8:39:
35:da:88:a0:ed:16:ff:69:c6:24:72:0e:3f:78:be:d5:41:d1:
2c:86:ae:45:7f:a5:84:32:0a:9b:94:42:b9:60:46:a5:3b:3d:
c7:57:d2:b3:f0:c3:73:7f:f7:d5:6a:d2:a5:dc:a5:9f:d2:b3:
77:80:e8:61:d0:ba:ad:cb:13:ee:6b:f1:72:2f:6e:cf:7e:99:
a7:d0:64:58:77:f6:10:c6:3f:5c:31:3c:f8:d2:22:1d:e8:d3:
82:08:8c:9a:07:99:2f:1d:88:f6:93:64:66:7f:2c:01:86:74:
e0:b0:24:93:98:a9:c1:1d:33:77:a3:ff:32:f4:df:e8:dd:eb:
87:24:7b:2f:bd:76:d9:6b:3b:53:e5:8f:ae:3d:33:2e:ec:42:
75:a2:bc:53:48:df:bf:33:f5:21:b0:5c:21:a9:35:60:8b:e9:
b9:bc:03:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 7 12:18:12 2025 by rpki-client